$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft File: 8R8km4Id_MKxuXr05wUm3ZM6En0.mft (raw, json) Hash identifier: tPEf1P0WE3/9kgevaNITsKLkzIqtrHfWms/xorSjo9A= Subject key identifier: 76:D0:D0:70:15:53:28:06:61:7F:41:A1:D7:11:DC:7D:A2:81:03:CF Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft Manifest number: E3 Signing time: Sat 23 Nov 2024 03:35:47 +0000 Manifest this update: Sat 23 Nov 2024 03:35:47 +0000 Manifest next update: Sat 30 Nov 2024 03:35:47 +0000 Files and hashes: 1: 8R8km4Id_MKxuXr05wUm3ZM6En0.crl (hash: F7P3XNBqiuWXKvTYHKtuRVtM5G/x9HCTkfXXfVfIFwY=) 2: 3D870D1C685F11EEA29D9F4BC4F9AE02.roa (hash: XwxYtSorve+SAC3u+XigKdLjB1a8nt+xDntpvYaL7J8=) 3: BA536126685D11EE8F1C1849C4F9AE02.roa (hash: e1IqMcuYiPqTkWCW+FmsDBUWi8cG1kCqz142ZXmx/B8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Validity Not Before: Nov 23 03:35:47 2024 GMT Not After : Nov 30 03:35:47 2024 GMT Subject: CN=67414d93-e81a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cf:98:d0:b6:d7:3e:ad:86:f8:2f:20:33:49: 2c:c0:6e:9e:4d:16:02:f6:ce:41:87:ea:5b:7d:9d: cb:4b:e5:93:66:ae:6f:bf:cd:c9:98:d4:aa:4c:d0: 78:f2:60:68:3a:a4:ec:08:e4:99:8e:59:dc:1e:b3: cf:3f:7c:42:40:64:f5:27:ee:be:e5:b1:26:09:99: a6:c9:b5:b3:e5:47:25:56:ea:ef:e8:b4:ea:23:e8: f6:67:3e:a6:7e:3c:5d:ee:ab:93:14:9d:39:74:cb: 1d:a4:aa:7e:a4:3f:38:61:13:c7:cd:b7:d8:9c:fe: 81:76:74:31:81:6c:09:ef:67:6c:65:85:8b:db:78: 2c:4e:0f:fe:85:f3:b5:f0:ef:ee:e5:a0:c4:dd:ec: e6:02:74:67:bb:aa:f2:ef:42:6a:dd:5e:dd:cf:da: 11:6d:12:9d:95:3b:25:d8:7a:03:46:8b:7b:4b:6b: 0a:5d:f9:97:5b:35:d1:be:53:b9:29:51:8b:92:68: 7d:65:9b:30:77:d4:c3:35:53:3b:32:83:ae:27:1f: 68:3b:f2:9d:7e:24:d4:ed:94:43:73:94:6e:3a:65: 0c:0d:8f:cf:43:32:19:29:54:25:c1:d8:26:bc:8a: 87:61:4e:d3:c0:1f:30:8a:bd:72:c5:df:65:f0:42: 7c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D0:D0:70:15:53:28:06:61:7F:41:A1:D7:11:DC:7D:A2:81:03:CF X509v3 Authority Key Identifier: keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:18:37:cf:b3:28:b2:c8:a2:6e:8c:7b:dd:f3:d1:4c:65:7c: 22:35:30:7a:25:d2:7f:a5:8d:2d:db:12:6a:03:40:30:04:dc: fe:32:1e:60:3a:85:ff:3c:ca:81:6f:87:be:53:97:c3:4e:fd: f7:fc:df:d1:1e:10:8a:cb:09:c2:e1:e9:d5:5b:ec:49:62:bc: a6:0e:4f:26:3f:23:e0:b0:9f:72:42:3b:54:f6:d6:36:33:34: e5:ca:b7:05:15:41:de:47:3e:40:de:13:04:7d:47:fc:c1:ba: bc:67:2e:f8:00:c3:db:b3:bb:b0:9b:90:15:ef:1e:d3:3d:7f: f1:50:b1:df:bd:db:a1:27:b8:ac:05:95:2b:2f:61:8a:b3:93: fe:21:c6:cf:6d:aa:b5:27:a1:e9:82:01:a6:d5:58:af:7b:08: fd:10:31:42:64:c7:ec:4d:88:51:bc:98:67:3d:61:8c:f6:bc: 8e:e3:08:37:7e:0f:21:89:37:b7:11:ba:a5:4a:04:f2:0f:ff: fe:91:57:a3:89:a5:5f:c3:0b:d9:6c:a8:27:d3:9d:58:56:84: dd:3d:40:e5:f8:03:12:20:92:b1:45:ce:56:51:0e:0b:d3:5a: 9d:bd:35:58:93:0a:23:32:f2:f0:9d:59:c9:d5:12:25:84:73: 26:e0:94:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGMjUxMTAvBgNVBAUTKEYxMUYyNDlCODIxREZDQzJCMUI5N0FGNEU3MDUyNkRE OTMzQTEyN0QwHhcNMjQxMTIzMDMzNTQ3WhcNMjQxMTMwMDMzNTQ3WjAYMRYwFAYD VQQDEw02NzQxNGQ5My1lODFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyM+Y0LbXPq2G+C8gM0kswG6eTRYC9s5Bh+pbfZ3LS+WTZq5vv83JmNSqTNB4 8mBoOqTsCOSZjlncHrPPP3xCQGT1J+6+5bEmCZmmybWz5UclVurv6LTqI+j2Zz6m fjxd7quTFJ05dMsdpKp+pD84YRPHzbfYnP6BdnQxgWwJ72dsZYWL23gsTg/+hfO1 8O/u5aDE3ezmAnRnu6ry70Jq3V7dz9oRbRKdlTsl2HoDRot7S2sKXfmXWzXRvlO5 KVGLkmh9ZZswd9TDNVM7MoOuJx9oO/KdfiTU7ZRDc5RuOmUMDY/PQzIZKVQlwdgm vIqHYU7TwB8wir1yxd9l8EJ8gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbQ0HAV UygGYX9BodcR3H2igQPPMB8GA1UdIwQYMBaAFPEfJJuCHfzCsbl69OcFJt2TOhJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkYyNS82MDY0QkFCMjUy RjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9NS3h1WHIwNXdVbTNaTTZF bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOGttNElkX01LeHVYcjA1d1VtM1pNNkVuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkYyNS82MDY0QkFCMjUyRjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9N S3h1WHIwNXdVbTNaTTZFbjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWGDfPsyiyyKJujHvd89FMZXwiNTB6JdJ/pY0t2xJqA0AwBNz+Mh5g OoX/PMqBb4e+U5fDTv33/N/RHhCKywnC4enVW+xJYrymDk8mPyPgsJ9yQjtU9tY2 MzTlyrcFFUHeRz5A3hMEfUf8wbq8Zy74AMPbs7uwm5AV7x7TPX/xULHfvduhJ7is BZUrL2GKs5P+IcbPbaq1J6HpggGm1Vivewj9EDFCZMfsTYhRvJhnPWGM9ryO4wg3 fg8hiTe3EbqlSgTyD//+kVejiaVfwwvZbKgn051YVoTdPUDl+AMSIJKxRc5WUQ4L 01qdvTVYkwojMvLwnVnJ1RIlhHMm4JRk -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:01 2024 by rpki-client on console-ams.rpki-client.org